This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft File: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json) Hash identifier: 2A5PJlaXw2vLOyfI2po998Mz9UF/6PiU73rCGAh2JM4= Subject key identifier: A9:6E:C5:03:0D:C3:1C:A3:7B:9F:DF:4D:90:B6:4F:44:00:0B:87:B4 Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06 Certificate issuer: /CN=66d0580e1725f45de106b97f77d9cd76bc4df806 Certificate serial: 019B0F6E772F4EB0BDDCC036EC2547D0FD05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft Manifest number: 1775 Signing time: Thu 11 Dec 2025 22:00:56 +0000 Manifest this update: Thu 11 Dec 2025 22:00:56 +0000 Manifest next update: Fri 12 Dec 2025 22:00:56 +0000 Files and hashes: 1: HFN5MH980DuANiJdbkL6ohnJj_k.roa (hash: Em5iJ0QcHb70vMs6Q6eEnq42l8uUpkT28Ocl0kx6uPc=) 2: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: ijioRAUShbUGdqhL4uBbW2geB4Czt076cOrt6Vu6OZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:77:2f:4e:b0:bd:dc:c0:36:ec:25:47:d0:fd:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806 Validity Not Before: Dec 11 22:00:56 2025 GMT Not After : Dec 12 22:00:56 2025 GMT Subject: CN=a96ec5030dc31ca37b9fdf4d90b64f44000b87b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cd:2e:7b:c0:9e:f5:e8:e1:60:1b:86:83:03: 0f:fb:4f:1b:f0:d8:db:74:ab:1d:1c:8f:e7:53:fe: d7:0d:b4:57:f4:be:05:9d:4b:61:52:cf:11:e6:fd: 51:8d:e3:ed:5f:c8:ad:59:d7:1a:17:ab:85:a4:6c: b0:6d:2f:7a:72:2c:3c:41:8a:0c:81:d3:d3:a7:04: ff:3d:5d:5a:6a:45:5c:a5:bc:83:8d:92:82:9b:f1: 9f:c1:e2:76:b7:6b:2a:71:5f:4c:a4:91:81:93:fa: cb:b5:00:42:ff:06:e9:c2:0d:f0:19:0a:49:2e:6e: d0:2a:34:2e:3c:6d:ba:b7:b0:c8:5f:d5:19:2e:24: 6a:d2:38:f4:68:09:18:1d:84:cd:60:85:e0:a5:ba: de:f8:f6:df:3a:ee:cd:2f:22:4b:88:41:3e:92:58: e2:0a:a1:1b:3b:ec:79:b6:84:56:af:d2:fc:b7:ae: cb:7e:21:b3:49:6e:d1:40:c7:7a:42:92:e8:6d:0f: 1d:bd:be:7b:f6:9b:3e:a6:8b:27:78:95:d1:3c:4b: 1f:a7:0d:47:83:b7:5c:81:03:8a:71:ec:08:12:94: 44:1d:78:29:72:bf:78:3a:bd:dd:8a:a2:2c:3d:e8: 6d:1d:00:92:ca:8e:af:b6:3d:80:f1:eb:0a:fa:fc: 7f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6E:C5:03:0D:C3:1C:A3:7B:9F:DF:4D:90:B6:4F:44:00:0B:87:B4 X509v3 Authority Key Identifier: keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:b5:cf:81:4e:c7:07:34:54:4f:1e:80:ab:73:5f:95:e8:36: bd:f2:fe:06:52:df:3e:74:94:c7:4a:3d:8a:8a:3b:48:42:1c: 17:32:e9:0f:76:43:89:7d:9c:2d:22:5b:0a:49:7b:b4:a1:04: 6c:0b:7c:41:d0:0d:49:d3:63:97:6d:35:bc:a0:0d:84:c5:43: 83:eb:0a:38:0d:3a:d6:c6:1f:54:2f:95:e1:62:85:ad:92:79: f8:b5:ef:01:a6:42:af:d9:f8:93:42:17:29:41:2e:9b:e0:21: 51:13:f1:9f:77:2d:50:8b:35:0a:8e:a4:14:b8:a0:47:ac:70: 9c:ca:26:da:8d:03:25:6e:09:dd:5f:68:5b:08:bf:97:e5:d9: 0f:da:d3:82:c0:9d:bb:06:b9:dc:20:f9:0d:f8:07:48:66:6b: 54:7a:cb:d8:e1:70:94:57:78:3e:b9:f2:48:08:fe:1d:c1:bb: a7:73:9e:fa:ae:7f:b3:d6:11:41:5b:39:84:a2:61:86:4f:4d: ab:c1:18:b2:17:20:bd:f0:e1:6e:6d:92:9d:da:dc:31:f1:29: 36:ba:f4:36:af:22:07:59:c8:3a:7a:5e:56:f2:dc:3c:a3:31: 00:3a:65:e0:b1:a2:04:22:48:c6:d3:05:ec:fb:0a:bb:37:da: bc:f9:d6:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbncvTrC93MA27CVH0P0FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDA1ODBlMTcyNWY0NWRlMTA2Yjk3Zjc3ZDljZDc2YmM0 ZGY4MDYwHhcNMjUxMjExMjIwMDU2WhcNMjUxMjEyMjIwMDU2WjAzMTEwLwYDVQQD EyhhOTZlYzUwMzBkYzMxY2EzN2I5ZmRmNGQ5MGI2NGY0NDAwMGI4N2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws0ue8Ce9ejhYBuGgwMP+08b8Njb dKsdHI/nU/7XDbRX9L4FnUthUs8R5v1RjePtX8itWdcaF6uFpGywbS96ciw8QYoM gdPTpwT/PV1aakVcpbyDjZKCm/GfweJ2t2sqcV9MpJGBk/rLtQBC/wbpwg3wGQpJ Lm7QKjQuPG26t7DIX9UZLiRq0jj0aAkYHYTNYIXgpbre+PbfOu7NLyJLiEE+klji CqEbO+x5toRWr9L8t67LfiGzSW7RQMd6QpLobQ8dvb579ps+posneJXRPEsfpw1H g7dcgQOKcewIEpREHXgpcr94Or3diqIsPehtHQCSyo6vtj2A8esK+vx/zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKluxQMNwxyje5/fTZC2T0QAC4e0MB8GA1UdIwQY MBaAFGbQWA4XJfRd4Qa5f3fZzXa8TfgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS82ZTljMDctMzNlZC00ZWU0LTgzZWMt OTVkOTVhY2U4MjgxLzEvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS82ZTljMDctMzNlZC00ZWU0LTgzZWMtOTVkOTVhY2U4Mjgx LzEvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLXPgU7H BzRUTx6Aq3Nfleg2vfL+BlLfPnSUx0o9ioo7SEIcFzLpD3ZDiX2cLSJbCkl7tKEE bAt8QdANSdNjl201vKANhMVDg+sKOA061sYfVC+V4WKFrZJ5+LXvAaZCr9n4k0IX KUEum+AhURPxn3ctUIs1Co6kFLigR6xwnMom2o0DJW4J3V9oWwi/l+XZD9rTgsCd uwa53CD5DfgHSGZrVHrL2OFwlFd4PrnySAj+HcG7p3Oe+q5/s9YRQVs5hKJhhk9N q8EYshcgvfDhbm2SndrcMfEpNrr0Nq8iB1nIOnpeVvLcPKMxADpl4LGiBCJIxtMF 7PsKuzfavPnWbw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:19:10 2025 by rpki-client